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B. AMENDMENTS TO THE CLAIMS 

1. (Currently Amended) a method of managing invalid password 
attempts, said method comprising; 

receiving a message corresponding to a failed login attempt 
from one of a plurality of computer bvb terns that receives 
user login requests from a comput e r ayotom , wherein the 
message includes a distinguished nam e, the diatinguiahod 
ft &mo oorr - Gopoiiding feo a failod login attempt ; 
calculating a total failed login attempt number 
corresponding to the distinguished name , the total failed 
login att empt number including the summation of failed 
login attem pts corresponding to the distinguished name that 
are received from the plurality of computer systems ? 
identifying a failed login attempt allowed number; 
determining whether the total failed login attempt number 
is greater than the failed login attempt allowed number; 
and 

revoking a password corresponding to the distinguished name 
based upon determining that the total failed login attempt 
number is greater than the failed login attempt allowed 
number on fche determination . 

2. (Canceled) 

3. (Currently Amended) The method as described in claim 1 
further comprising: 

establishing a secure connection with the computer system 
that sent the message : and 

verifying a digital certificate corresponding to the 
computer system that sent the message , wherein the digital 
certificate is included in the message. 
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(Original) The method as described in claim 1 wherein the 
determining further comprises; 

configuring parameters, wherein the parameters include a 
login tracking period; 

storing a record in a failed login data store, the record 
including the distinguished name and a timestamp 
corresponding to a time the message, was received; and 
removing one or more records from the failed login data 
store in response to one or more corresponding timestampe 
being older than the tracking period. 

(Currently Amended) The method as described in claim 1 
wherein the revoking further includes i 
preparing a password revocation message, the password 
revocation message identifying the distinguished name; and 
sending the password revocation message to each of the 
plurali ty of computer systems oae eg gtege login □criroi-g, 
wherein fcho login gprvcro include feho computer oyplcm . 

(Currently Amended) The method as described in claim 5 
further comprising: 

establishing a secure connection to each of the plurality 
of computer aystemB login aorvera ; and ' 
including a digital signature identifying a sending 
computer system in the password revocation message. 

(Original) The method as described in claim 5 wherein the 
password revocation message is sent in response to 
determining that the password was not previously revoked; 
and 
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wherein the password revocation message is not sent in 
response to determining that the password was previously 
revoked. 

B. (Currently Amended) An information handling system 
comprising s 

one or more processors; 

a memory accessible by the processors? 

one or more nonvolatile storage devices accessible by the 
processors ; 

a password managing tool to process invalid password 
attempts, the password managing tool including: 

means for receiving a message corresponding to 
failed login attempt from one of a plurality of 
computer systems that receives user login requests 
£ rom a computer nyotcm , wherein the message includes a 
distinguished name , the diatinguiohod nam e 
corrooponding to a f ailed login attempt ,* 
means for calculating a total failed login attempt 
number corresponding to the distinguished name , the 
total failed login attempt number including the 
summation of failed login attempts corresponding to 
the distinguished name that are received from the 
plurality of computer systems ; 

meanB for identifying a failed login attempt allowed 
number; 

means for determining whether the total failed login 
attempt number is greater than the failed login 
attempt allowed number; and 

means for revoking a password corresponding to the 
distinguished name based upon determining that the 
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total failed login attempt number is greater than the 
failed login attempt allowed number on feh e 
d atDrminofcion . 

9. (Canceled) 

10. (Currently Amended) The information handling system as 
described in claim 8 further comprising: 

means for establishing a secure connection with the 
computer system that sent the message ; and 
means for verifying a digital certificate corresponding to 
the computer system that sent the message , wherein the 
digital certificate iB included in the message, 

11. (Original) The information handling system as described in 
claim 8 wherein the determining further comprises i 

means for configuring parameters, wherein the parameters 
include a login tracking period; 

means for storing a record in a failed login data store, 
the record including the distinguished name and a timestamp 
corresponding to a time the message was received; and 
means for removing one or more records from the failed 
login data store in response to one or more corresponding 
timestamps being older than the tracking period. 

12. (Currently Amended) The information handling system as 
described in claim 8 wherein the revoking further includes: 
means for preparing a password revocation message, the 
password revocation message identifying the distinguished 
name; and 

means for sending the password revocation message to each 
of the plurality of computer systems ono or more login 
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gervora, wherein the login aegvorn include tho computer 
oyofeom . 

13. (Currently Amended) The information handling system as 
described in claim 12 further comprising: 

means for establishing a secure connection to each of the 
plurality of computer systems login serv e r s; and 
including a digital signature identifying a sending 
computer system in the password revocation message. 

14. (Currently Amended) A computer program product stored in a 
computer operable media for processing invalid password 
attempts, said computer program product comprising t 

means for receiving a message corresponding to a failed 
login attempt from one of a plurality of computer systems 
that receives user login requests from a com p uter ayotom , 
wherein the message includes a distinguished name-i — the- 
diotingulohed name corresponding to o failed login attempt ; 
meanB for calculating a total failed login attempt number 
corresponding to the distinguished name / the total failed 
login attempt number including the summation of failed 
login attempts corresponding to the distinguished name that 
are received from the plurality of computer systems ; 
means for identifying a failed login attempt allowed 
n.umber; 

means for determining whether the total failed login 
attempt number is greater than the failed login attempt 
allowed number; and 

means for revoking a password corresponding to the 
distinguished name based upon determining that the total 
failed login attempt number is greater than the failed 
login attempt allowed number on the dotormination . 
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15. (Canceled) 

16. (Currently Amended) The computer program product as 
described in claim 14 further comprising: 

means for establishing a secure connection with the 
computer system that sent the message ; and 
means for verifying a digital certificate corresponding to 
the computer system that sent the measac[e , wherein the 
digital certificate is included in the message. 

17. (Original) The computer program product as described in 
claim 14 wherein the determining further comprises; 
means for configuring parameters, wherein the parameters 
include a login tracking period; 

means for storing a record in a failed login data store, 
the record including the distinguished name and a timestamp 
corresponding to a time the message was received; and 
means for removing one or more records from the failed 
login data store in response to one or more corresponding 
timestamps being older than the tracking period. 

18. (Currently Amended) The computer program product as 
described in claim 14 wherein the revoking further 
Includes: 

means for preparing a password revocation message, the 
password revocation message identifying the distinguished 
name ; and 

means for sending the password revocation message to each 
of the plurality of computer Bystems one or more login 
Dorvoro/ wherein the login acrvcra include the eo - mputor 
ayotem . 
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19. (Currently Amended) The computer program product as 
described in claim 18 further comprising* 

means for establishing a secure connection to each o£ the 
plurality of computer systems login aorv e r -e; and 
means for including a digital signature identifying a 
sending computer system in the password revopation message. 

20. (Original) The computer program product as described in 
claim 18 wherein the password revocation message is sent in 
response to determining that the password was not 
previously revoked; and 

wherein the password revocation message is not sent in 
response to determining that the password was previously 
revoked . 
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